TI-2026-38584 CVE-2026-53510 · GHSA-mx5j-mp4f-g8jgSavon::Model evaluates WSDL operation names as Ruby sourcePriority LOW 38Savon is a Ruby SOAP client.CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00687 · Published 2026-07-31 · Fixed in 2.17.2 CWE-94